PT-2020-12263
CVE-2020-10639
·
تاريخ النشر
2020-04-15
·
تاريخ التحديث
2020-04-22
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Eaton HMiSoft VU3 versions 3.00.23 and prior
Description
A specially crafted input file could cause a buffer overflow when loaded by the affected product. The issue is related to file parsing and can lead to remote code execution.
Recommendations
For Eaton HMiSoft VU3 versions 3.00.23 and prior, update to a version later than 3.00.23 to resolve the issue.
As a temporary workaround, consider restricting the loading of specially crafted input files to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾